Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File:                     pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier:          0Xg/f5CujyDnmAS4ywIV9xMW0R9Vt9df+eZaI78DCxE=
Subject key identifier:   A6:6E:18:6F:F1:DB:70:ED:5F:97:29:23:66:CE:B3:0F:8B:42:28:5C
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer:       /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number:          0109
Signing time:             Thu 23 Jul 2026 07:49:37 +0000
Manifest this update:     Thu 23 Jul 2026 07:49:36 +0000
Manifest next update:     Thu 30 Jul 2026 07:49:36 +0000
Files and hashes:         1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: ytzBbB3kRVdLsO+Hz2yYZ378x4DDl3Y3wiPmewgKWzM=)
                          2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: pKM2r60kiKPj1EOj5o/9P1X4OcOTkc7kjSEawMzaPfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
                          rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
        Validity
            Not Before: Jul 23 07:49:36 2026 GMT
            Not After : Jul 30 07:49:36 2026 GMT
        Subject: CN=6a61c790-2a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:8b:1a:a3:82:aa:00:4a:51:59:65:8d:22:
                    b6:53:8d:d4:ff:96:4a:6f:48:9a:5b:54:32:2c:eb:
                    b9:35:40:96:1a:7b:cc:63:d4:d2:79:8e:63:e0:51:
                    22:06:43:a0:60:0a:9d:db:0d:84:93:a9:c9:cb:4d:
                    1b:29:f0:31:2f:ac:14:bb:fd:41:9a:7f:57:5b:92:
                    15:23:a8:17:2b:08:78:16:db:5a:16:66:ef:63:ef:
                    47:d6:a1:e4:66:a6:5c:44:63:f2:3e:53:ac:8c:2d:
                    57:4e:6f:9c:da:c2:2e:ea:e7:49:96:4d:dd:5c:4e:
                    1a:c8:a3:b5:5c:6f:b1:31:47:a5:e8:12:cb:de:fc:
                    c4:cf:2b:ad:48:2a:5d:fc:4a:b6:3c:18:35:60:e8:
                    5b:99:62:b7:a7:a3:21:b4:be:62:4a:71:aa:00:ba:
                    d0:4b:fc:eb:64:35:6f:4e:b9:3a:39:ad:e7:36:3d:
                    1a:5b:a2:6f:a8:e1:d0:7e:73:75:16:a7:38:6d:57:
                    d5:15:e5:91:4e:2d:37:fd:4b:fc:e8:ce:51:19:8b:
                    95:6d:35:1f:2f:a2:cd:f0:c3:4e:c2:ca:7c:74:93:
                    45:e0:5f:f7:56:38:96:8a:f6:78:6c:60:77:97:71:
                    8f:f3:d2:b6:b6:d0:a1:bc:b3:c3:ae:ae:55:96:d1:
                    5a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6E:18:6F:F1:DB:70:ED:5F:97:29:23:66:CE:B3:0F:8B:42:28:5C
            X509v3 Authority Key Identifier:
                keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:07:e6:38:7c:e2:8e:13:d8:dd:14:0d:9f:89:b3:47:82:
         fc:92:2f:aa:74:19:38:ee:53:1e:bc:37:85:18:d3:fe:76:d0:
         f2:31:13:6a:11:36:98:76:f8:e9:de:3d:b0:99:87:d7:36:0b:
         c0:6a:6d:a7:99:eb:25:37:b8:00:c0:f7:37:c8:14:77:89:8a:
         a6:ff:86:c2:be:4f:e4:f9:7e:2a:da:6a:88:ac:36:c2:5d:5c:
         68:15:ef:5f:22:26:01:4f:88:ba:7e:94:19:5d:76:5d:2a:45:
         56:d2:c9:ac:f4:b6:a7:8b:cf:7a:ed:b6:0b:50:2e:cf:ab:77:
         ff:a8:af:a4:55:8e:2b:a8:37:3c:63:21:a8:04:61:49:4c:1e:
         20:30:af:82:81:fe:ad:bd:b3:ba:4f:77:ec:56:f1:c9:64:14:
         3a:0c:0f:58:e0:ae:c0:73:21:d2:60:0f:af:cd:9e:3b:5d:28:
         47:3e:00:89:b2:d5:4a:fb:3e:0e:44:55:1b:a8:02:f2:35:39:
         99:31:2f:32:0c:c6:36:ad:f5:3e:52:92:59:54:2f:f3:63:11:
         6d:07:5a:57:40:18:7e:41:1e:37:10:26:1a:46:cf:c0:cd:b5:
         bf:69:be:4b:6a:7e:fd:a6:45:83:a3:08:7f:ea:02:32:2c:66:
         c4:4c:12:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:13:13 2026 by rpki-client